Re: Name resolve a custom column

[chuck c <bubbasnmp () gmail com>]

Does the field you're using have a corresponding "resolved" field?

$ tshark -G fields | grep -i resolved
F       nextRDNToBeResolved     dsp.nextRDNToBeResolved FT_INT32        dsp
    BASE_DEC        0x0     INTEGER
F       rdnsResolved    dsp.rdnsResolved        FT_INT32        dsp
BASE_DEC        0x0     INTEGER
F       Destination (resolved)  eth.dst_resolved        FT_STRING       eth
            0x0     Destination Hardware Address (resolved)
F       Destination OUI (resolved)      eth.dst.oui_resolved    FT_STRING
    eth             0x0     Destination Organizationally Unique Identifier
(resolved)
F       Source (resolved)       eth.src_resolved        FT_STRING       eth
            0x0     Source Hardware Address (resolved)
F       Source OUI (resolved)   eth.src.oui_resolved    FT_STRING       eth
            0x0     Source Organizationally Unique Identifier (resolved)
F       Address (resolved)      eth.addr_resolved       FT_STRING       eth
            0x0     Source or Destination Hardware Address (resolved)
F       Address OUI (resolved)  eth.addr.oui_resolved   FT_STRING       eth
            0x0     Address Organizationally Unique Identifier (resolved)
F       Destination address (resolved)  wlan.da_resolved        FT_STRING
    wlan            0x0     Destination Hardware Address (resolved)
F       Source address (resolved)       wlan.sa_resolved        FT_STRING
    wlan            0x0     Source Hardware Address (resolved)
F       Hardware address (resolved)     wlan.addr_resolved      FT_STRING
    wlan            0x0     SA, DA, BSSID, RA or TA Hardware Address
(resolved)
F       Receiver address (resolved)     wlan.ra_resolved        FT_STRING
    wlan            0x0     Receiving Station Hardware Address (resolved)
F       Transmitter address (resolved)  wlan.ta_resolved        FT_STRING
    wlan            0x0     Transmitting Station Hardware Address (resolved)
F       BSS Id (resolved)       wlan.bssid_resolved     FT_STRING
wlan            0x0     Basic Service Set ID (resolved)
F       STA address (resolved)  wlan.staa_resolved      FT_STRING
wlan            0x0     Station Hardware Address (resolved)
F       resolQNLn       mq.msgasy.resolqnln     FT_UINT8        mq
 BASE_DEC        0x0     MSGASYNC Resolved Queue Name Length
F       resolQNme       mq.msgasy.resolqnme     FT_STRINGZ      mq
     0x0     MSGASYNC Resolved Queue Name
F       Resolved Q Name..       mq.od.resolvq   FT_STRINGZ      mq
     0x0     OD resolved queue name
F       Resolved QMgrName       mq.od.resolvqmgr        FT_STRINGZ      mq
             0x0     OD resolved queue manager name
F       Resolv Obj Type..       mq.od.resolvedobjtype   FT_UINT32       mq
     BASE_DEC        0x0     OD resolved object type
F       ResQName.       mq.gmo.resolvq  FT_STRINGZ      mq              0x0
    GMO resolved queue name
F       ResQName...     mq.pmo.resolvq  FT_STRINGZ      mq              0x0
    PMO resolved queue name
F       ResQMgr....     mq.pmo.resolvqmgr       FT_STRINGZ      mq
     0x0     PMO resolved queue manager name
F       Dfs     smb.flags2.dfs  FT_BOOLEAN      smb     16      0x1000  Can
pathnames be resolved using Dfs?
F       Unresolved value, Missing MIB   snmp.missing_mib        FT_NONE
snmp            0x0
F       Resolved U-RNTI mac.resolved_urnti      FT_UINT32       mac
BASE_HEX        0x0     The U-RNTI of the UE which is using the C-RNTI seen
in this frame
F       LDev_get_ACCO: can't resolve ACCO interface pointer
cba.acco.interface_pointer_unresolved   FT_NONE cba_pdev
                                                                0x0

On Wed, Jun 17, 2020 at 11:24 AM Sri <sriganeshkini () gmail com> wrote:

> When a Custom Column is created, how can it be displayed with a resolved
> name?
>
> Even when I select a resolved field in the Packet Details pane and
> right-click to choose 'Apply as a Column', the column in the Packet List
> pane is not name resolved.
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    https://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
>              mailto:wireshark-users-request () wireshark org
> ?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe